We should always specify a checksum when describing a repository to pull content from. For now, fedora-30 duplicated the checksum. The idea is that we can have it in one place at some point.